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REMARKS 

The Applicants and the undersigned thank Examiner Adams for his time and 
consideration given during the telephonic interview of January 18, 2005. The Applicants also 
appreciate the Examiner 5 s careful review of this application. 

In connection with a petition and two month extension fee to extend the due date to 
January 21, 2005, consideration of the claim amendments above and the remarks below is 
respectfully requested. Claims 1-2 have been rejected. Upon entry of this amendment, Claims 
1-2 have been cancelled and Claims 3-18 are now pending in this application. The independent 
claims are Claims 3, 7, and 13. Consideration of the present application is respectfully requested 
in light of the above amendments to the application and in view of the following remarks. 

Summary of Telephonic Interview Conducted o n January 18, 2005 

The Applicants and the undersigned extend their gratitude to the Examiner for the 
telephonic interview conducted with the Examiner on January 18, 2005. During the telephonic 
interview, the Applicants' representative and the Examiner discussed a proposed claim 
amendment. 

The Applicants' representative explained that each of the three new independent claims 
contain elements that are not taught by the prior art of record. Specifically, for new independent 
Claim 3, it was explained that the prior art does not provide any teaching of the combination of 
(1) receiving a first message via HTTP from a client device that comprises a request to obtain an 
identity of one of a clearinghouse and routing policy server, (2) the request further comprising a 
computer programming variable operation that is set equal to alphanumeric text comprising 
'getcacert' that initiates a search for a certificate authority certificate; and responding to the 
request by transmitting a second message comprising (3) the certificate authority certificate of 
one of a clearinghouse and routing policy server in a (4) Base64 format and encoded in (5) 
ASCII with (6) content type set to text/html. 

In connection with new independent Claim 7, it was explained that the prior art does not 
provide any teaching of the combination of (1) responding to the request by transmitting a 
second message comprising a certificate authority certificate of one of a clearinghouse and 
routing policy server to the client device; and (2) receiving a third message comprising a 
certificate request from the client device, the certificate request comprising (3) a nonce value, (4) 
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a user's name, (5) a user's password, (6) a device identifier, (7) a customer identifier, and (8) a 
certificate request to be signed. 

In connection with new independent Claim 13, it was explained that the prior art of 
record does not provide any teaching of the combination of (1) receiving a first message from a 
client device that comprises a request to obtain an identity one of a clearinghouse and routing 
policy server, (2) responding to the request by transmitting a second message comprising a 
certificate authority certificate of one of a clearinghouse and a routing policy server to the client 
device, wherein (3) the second message comprises a programming variable status that is set 
equal to (4) alphanumeric text comprising 'O&certjficate' that indicates certificate authority 
information follows this text; and (5) receiving a third message comprising a certificate request 
from the client device comprising a certificate request to be signed. 

Examiner Adams suggested a few changes to the proposed claims to make them in 
compliance with 35 U.S.C. §1 12, second paragraph (which have been adopted by the Applicants 
and are in the claims presented above). Examiner Adams stated he would take these points 
discussed by the Applicants under consideration and that he would likely need to conduct an 
update search of the prior art. 

The Applicants and the undersigned request Examiner Adams to review this interview 
summary and to approve it by writing "Interview Record OK" along with his initials and the date 
next to this summary in the margin as discussed in MPEP § 713.04, p. 700-202. 

Claim Rejections under 35 U.S.C. S 103 

The Examiner rejected Claims 1-2 under 35 U.S.C. § 103 (a) as being unpatentable over 
Zimmerman et al„ U.S. Patent No. 6,526,131 (hereinafter the "Zimmerman reference") in view 
of a printed publication entitled, "Introduction to SSL," (hereinafter the "SSL reference") 
allegedly published on October 9, 1998 and retrieved from the Internet on May 19, 2004 at: 
http://developer.netscape.com/docs/manuals/securitv/sslin/content$.htm . 

The Applicants will address each independent claim separately as the Applicants believe 
that each independent claim is separately patentable over the prior art of record. 

The Applicants note that the previous two pending claims have been cancelled and the 
Applicants have presented new Claims 3-18. However, the Applicants will discuss these new 
claims to explain how they are different from the prior art of record, 
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Independent ClaimS 

It is respectfully submitted that the Zimmerman and SSL references fail to describe, 
teach, or suggest the combination of (1 ) receiving a first message via HTTP from a client device 
that comprises a request to obtain an identity of one of a clearinghouse and routing policy server, 

(2) the request further comprising a computer programming variable operation that is set equal to 

(3) alphanumeric text comprising 'getcacert* that initiates a search for a certificate authority 
certificate; (4) responding to the request by transmitting a second message comprising the 
certificate authority certificate of one of a clearinghouse and routing policy server in a Base64 
format and encoded in ASCII with content type set to text/html; (5) receiving a third message 
comprising a certificate request from the client device; (6) responding to the client device request 
by signing the certificate; and (7) transmitting a fourth message comprising the certificate signed 
by a certificate authority of one of the clearinghouse and the routing policy server, as recited in 
new independent Claim 3. 

The Zimmerman Reference 

The Zimmerman reference describes ways to avoid the need for dedicated PTSN phone 
lines. Dedicated PTSN phone lines can be phone lines used to keep two computer systems 
permanently connected for immediate communication between the two systems when required. 
A dedicated phone line is a simple, convenient and secure way to connect two systems. 

Meanwhile, the Zimmerman reference describes a way to have the functional capabilities 
of a dedicated connection using a dial-up connection or another connection method that is used 
only when needed. The Zimmerman reference relates to remotely waking up customer premises 
equipment to cause the latter to initiate communication with a network-based service system. 

The Zimmerman reference describes ways to use a wake-up call to a remote device to 
quickly establish a connection, rather than maintaining a dedicated phone line. The wakeup call 
is identified by means of a characteristic caller ID or distinctive ring, or, in the event the call is 
picked up, by rapid call termination, by an in-band signal, or by a predetermined period of 
silence. All these call characteristics permit the customer premises equipment to recognize 
wakeup calls on a line also receiving normal telephone calls. 

The Examiner refers the Applicants to Column 8, lines 37-45 of the Zimmerman 
reference that generally describes the use of a Secure Sockets Layers (SSLs) to establish secure 
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communications. However, this section of the Zimmerman reference does not provide any 
further details about how SSL is used. In fact, the Examiner admits that the Zimmerman 
reference does not teach the specifics of the SSL protocol. See Office Action of August 20, 
2004; page 2, paragraph number 4. 

In light of this, it is apparent to one of ordinary skill in the art that the Zimmerman 
reference cannot anticipate nor render obvious a combination of (a) receiving a first message via 
HTTP from a client device that comprises a request to obtain an identity of one of a 
clearinghouse and routing policy server, (b) the request further comprising a computer 
programming variable operation that is set equal to alphanumeric text comprising 'getcacert' that 
initiates a search for a certificate authority certificate; and responding to the request by 
transmitting a second message comprising (c) the certificate authority certificate of one of a 
clearinghouse and routing policy server in a (d) Base64 format and encoded in (e) ASCII with 
(f) content type set to text/html. 

The SSL reference 

The Examiner admits that the Zimmerman reference does not teach the specifics of the 
SSL protocol. To make up for this SSL deficiency, the Examiner relies on the SSL reference. 

The SSL reference generally teaches the SSL protocol. The SSL provides a summary of 

steps that are taken during an SSL handshake to establish a secure communications channel. 

However, the SSL reference does not provide any teaching or description of the contents of 

messages that are exchanged between a client device and a server. See the SSL reference on 

page 6, second full paragraph after the table which states the following: 

"The exact programmatic details of the messages exchanged 
during the SSL handshake are beyond the scope of this document. 
However, the steps involved can be summarized as follows 
(assuming the use of cipher suites listed in Ciph er Suites with RSA 
key exchange) ;" 

Therefore, it is apparent to one of ordinary skill in the art that the SSL reference, like the 
Zimmerman reference, also cannot anticipate nor render obvious a combination of (a) receiving a 
first message via HTTP from a client device that comprises a request to obtain an identity of one 
of a clearinghouse and routing policy server, (b) the request further comprising a computer 
programming variable operation that is set equal to alphanumeric text comprising 'getcacert' that 
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initiates a search for a certificate authority certificate; and responding to the request by 
transmitting a second message comprising (c) the certificate authority certificate of one of a 
clearinghouse and routing policy server in a (d) Base64 format and encoded in (e) ASCII with 
(f) content type set to text/html, as recited in new independent Claim 3 . 

In light of the differences between new Claim 3 and the SSL and Zimmerman references, 
one of ordinary skill in the art recognizes that the broadest, reasonable interpretation of these 
references cannot anticipate or render obvious the recitations as set forth in new independent 
Claim 3. Accordingly, consideration and an indication that Claim 3 is allowable over the prior 
art are respectfully requested. 

Independent Claim 7 

It is respectfully submitted that the Zimmerman and SSL references fail to describe, 
teach, or suggest the combination of (1) receiving a first message from a client device that 
comprises a request to obtain an identity of one of a clearinghouse and routing policy server; (2) 
responding to the request by transmitting a second message comprising a certificate authority 
certificate of one of a clearinghouse and routing policy server to the client device; (3) receiving a 
third message comprising a certificate request from the client device, the certificate request 
comprising a (4) nonce value, a (5) user's name, a (6) user's password, a (7) device identifier, a 
(8) customer identifier, and a (9) certificate request to be signed; (10) responding to the client 
device request by signing the certificate; and (1 1) transmitting a fourth message comprising the 
certificate signed by the CA of the clearinghouse or routing policy server, as recited in amended 
independent Claim 7. 

As noted above in the discussion of independent Claim 3, the Zimmerman and SSL 
references do not address exact programmatic details of the messages exchanged during an SSL 
handshake. Therefore, it is apparent to one of ordinary skill in the art that the SSL reference and 
Zimmerman references cannot anticipate nor render obvious a combination of (a) receiving a 
third message comprising a certificate request from the client device, the certificate request 
comprising a (b) nonce value, a (c) user's name, a (d) user's password, a (e) device identifier, a 
(f) customer identifier, and a (g) certificate request to be signed; (h) responding to the client 
device request by signing the certificate; and (i) transmitting a fourth message comprising the 
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certificate signed by the CA of the clearinghouse or routing policy server, as recited in new 
independent Claim 7, 

In light of the differences between new Claim 7 and the SSL and Zimmerman references, 
one of ordinary skill in the art recognizes that the broadest, reasonable interpretation of these 
references cannot anticipate or render obvious the recitations as set forth in new independent 
Claim 7. Accordingly, consideration and an indication that Claim 7 is allowable over the prior 
art are respectfully requested. 

Independent Claim 13 

It is respectfully submitted that the Zimmerman and SSL references fail to describe, 
teach, or suggest the combination of (1) receiving a first message from a client device that 
comprises a request to obtain an identity one of a clearinghouse and routing policy server; (2) 
responding to the request by transmitting a second message comprising a certificate authority 
certificate of one of a clearinghouse and a routing policy server to the client device, wherein the 
second message comprises (3) a programming variable status that is set equal to (4) 
alphanumeric text comprising 'O&certificate' that indicates certificate authority information 
follows the alphanumeric text; (5) receiving a third message comprising a certificate request 
from the client device comprising a certificate request to be signed; (6) responding to the client 
device request by signing the certificate; and (7) transmitting a fourth message comprising the 
certificate signed by the certificate authority of the clearinghouse or routing policy server, as 
recited in new independent Claim 13. 

As noted above in the discussion of independent Claim 3, the Zimmerman and SSL 
references do not address exact programmatic details of the messages exchanged during an SSL 
handshake. Therefore, it is apparent to one of ordinary skill in the art that the SSL reference, like 
the Zimmerman reference, also cannot anticipate nor render obvious a combination of (a) 
responding to the request by transmitting a second message comprising a certificate authority 
certificate of one of a clearinghouse and a routing policy server to the client device, wherein the 
second message comprises (b) a programming variable status that is set equal to (c) 
alphanumeric text comprising 'O&certificate' that indicates certificate authority information 
follows the alphanumeric text; (d) receiving a third message comprising a certificate request 
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from the client device comprising a certificate request to be signed; and (e) responding to the 
client device request by signing the certificate, as recited in new independent Claim 13. 

In light of the differences between new Claim 13 and the SSL and Zimmerman 
references, one of ordinary skill in the art recognizes that the broadest, reasonable interpretation 
of these references cannot anticipate or render obvious the recitations as set forth in new 
independent Claim 13. Accordingly, consideration and an indication that Claim 13 is allowable 
over the prior art are respectfully requested. 

New Dependent Claims 4-6. 8-12. and 14-11 

These new dependent claims are being presented to further define the invention. These 
dependent claims should be allowable because their corresponding independent claims should be 
allowable over the prior art of record. Consideration of these new claims and an early notice of 
allowance are courteously solicited from the Examiner. 



The foregoing is submitted as a full and complete response to the Office Action mailed 
on August 20, 2004. The Applicants and the undersigned thank Examiner Adams for the 
consideration of these remarks. The Applicants have submitted remarks to traverse the pending 
rejections and to identify the differences between new Claims 3-18 and the prior art. The 
Applicants respectfully submit that the present application is in condition for allowance. Such 
Action is hereby courteously solicited. 

If any issues remain that may be resolved by telephone, the Examiner is requested to call 
the undersigned at 404.572.2884. 



King & Spalding LLP 
45 1h Floor 

191 Peachtree Street, N.E. 
Atlanta, Georgia 30303 
404.572.4600 

K&S Docket: 06949.105013 
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CONCLUSION 



Respectfully submitted, 




